본문으로 건너뛰기
727 Finance
한국어

Blockchain Firms Link North Korea to $6.3 Billion Binance Hack

Bitcoin Magazine Blockchain Firms Link North Korea to $6.3 Billion Binance Hack Chainalysis and TRM Labs have linked yesterday’s $6.3 billion Binance hack to North Korea’s TraderTraitor group.

Bitcoin Magazine

Blockchain Firms Link North Korea to $6.3 Billion Binance Hack 

Blockchain analysis firms Chainalysis and TRM Labs have linked the $6.3 billion Binance hack yesterday to TraderTraitor, a unit associated with North Korea. If confirmed at this scale, the theft would be the largest crypto hack on record. 

Chainalysis puts the total at $6.4 billion in its own assessment. Chainalysis says funds began leaving Binance hot wallets across multiple blockchains around 4:20 p.m. Eastern Time on October 29. 

The firm said the attacker used an operational wallet funded through Tornado Cash to submit signed authorizations that allowed a Binance hot wallet to run attacker-deployed code. 

The attacker then swept assets into addresses under its control. Binance has said its initial investigation points to a compromised engineer’s laptop, which gave an attacker access to a service container and enabled unauthorized withdrawals. 

The exchange said it has found no evidence of a wallet private key leak.

The attacker reportedly tried to outpace freezes by converting stablecoins into ether and other assets that issuers cannot freeze. Chainalysis said the attacker swapped $325 million in stablecoins into $285 million in ETH over roughly 20 minutes, then sent the remaining $175 million to stopover wallets. Freezes began by 5:14 p.m. Eastern, according to the firm.

Market reacts to the hack

Bitcoin dropped toward $76,000 on Friday morning before trading near $77,400. Other crypto followed suit and posted declines of their own. Total market liquidations reached $1.5 billion, with bitcoin accounting for $468 million and ether for $358 million. 

Long positions, which bet on higher prices, bore most of the losses. The sell-off coincided with a separate incident at decentralized betting platform Polymarket, which suspended international trading after hackers drained more than $2.6 million from user accounts.

Binance said Thursday that the security incident affected about $6.3 billion in assets, surpassing the $1.5 billion Bybit hack of 2025, which was attributed to North Korean hackers. Former CEO Changpeng Zhao wrote on X, “It does look like a hack.” Zhao no longer runs the exchange but remains a key shareholder.

Stablecoin issuers moved to contain the fallout. Tether CEO Paolo Ardoino said the company froze more than $1.567 billion in USDT and that protecting the industry and its partners is its main priority. 

Circle co-founder and CEO Jeremy Allaire said Circle froze more than $800 million in USDC in coordination with law enforcement. First Digital CEO Vincent Chok said FDUSD stolen in the attack has been frozen. Binance says about $3 billion has been frozen onchain in total.

Binance has enough funds to cover the incident

Binance says it has reserved more than $6.34 billion of company funds to cover the incident. About $5 billion of that reserve is held in the same token assets that were affected, and the company is buying the remainder through market and OTC channels. 

The exchange says frozen and protected assets remain subject to verification and plans to publish an updated Proof of Reserves. 

Reuters, citing a person familiar with the matter, reported that Binance is working with the FBI and the U.S. Secret Service.

Bitcoin may have further downside

Standard Chartered’s global head of digital assets research, Geoffrey Kendrick, wrote in an email to CoinDesk that the negative price action may have some way to go. He said a new base will form after assets are unfrozen and more details of the hack emerge. 

Kendrick argued that the incident could accelerate a shift toward decentralized exchanges. Chainalysis has warned that scammers are impersonating the firm, including those offering fund recovery and recruiting services. 

Victims should treat unsolicited recovery offers with caution and rely on official channels for updates.

At the time of writing, Bitcoin is trading near $76,700.

관련 뉴스

  1. 마다가스카르 법무부: 암호화폐 사기 사건에 연루된 중국 국적자 148명이 송환되었다.

  2. Talis Protocol 마켓 컨트랙트가 공격을 받아 약 5,700개의 에스크로된 NFT가 도난당했습니다.

    PANews 11월 2일 소식: Talis Protocol은 공개를 통해 10월 31일 공격자가 Injective 체인상의 자사 마켓플레이스 및 경매 계약의 취약점을 악용하여 약 5,700개의 에스크...

  3. EIP-7702란 무엇인가? 바이낸스 해킹 사건의 배후에 있는 이더리움 업그레이드

    EIP-7702는 일반 이더리움 지갑이 스마트 컨트랙트 코드를 실행할 수 있도록 하여, 배치 트랜잭션과 후원 트랜잭션(사용자를 대신하여 가스비를 지불하는 것)을 가능하게...

  4. 분석: 바이낸스 해커가 이틀 만에 트론을 통해 약 2억 4,200만 달러를 세탁했다.

  5. 허이(He Yi), "바이낸스 엔지니어와 북한 스파이의 관계로 인한 절도"라는 소문을 부인